Legal
Last updated 8 July 2026
This policy explains what personal data Fina ("Fina", "we", "us") collects when you use fina.readmedb.com, why we collect it, who we share it with, and the choices and rights you have over it. It's written to describe what the product actually does, not generic boilerplate — if you spot something here that doesn't match reality, please tell us.
Fina is a personal finance assistant that connects to your UK bank accounts and Trading 212 investment account (read-only, via Open Banking) and answers questions about your money on the web. For any privacy query, contact [email protected].
Your name and email address, via Clerk (our authentication provider), when you sign up or sign in.
Once you connect a bank via Open Banking or add a Trading 212 API key, we receive and store: account and balance information, transaction history (amount, date, merchant/description, category), direct debits, standing orders, and — for Trading 212 — your portfolio holdings and value. This is always read-only; see the Security & Data page for exactly what that means.
The questions you ask Fina, and Fina's answers, are stored so you can revisit a conversation and so Fina has context across messages.
If you tell Fina something worth remembering across sessions (e.g. an income figure, a savings goal, a preference), it may be stored as a durable memory via ReadmeDB, our long-term memory provider, so future conversations can refer back to it without you repeating yourself.
Standard web request data (IP address, browser type, timestamps) for security and abuse prevention, and authentication session cookies from Clerk.
We do not sell your data, and we do not use it for advertising — we don't run any ad-tech or analytics trackers on this site (see Cookies).
Fina uses two AI providers for different parts of the product. The conversational assistant you chat with on the web sends relevant parts of your financial data (e.g. a set of transactions, a spending summary) to OpenAI (GPT) as part of generating each response. Background features like categorising transactions and generating the periodic analysis report use Anthropic (Claude) by default. Under each provider's standard commercial API terms, data submitted this way is not used to train their models. We send only what's needed to answer the question or complete the task in front of Fina, not your full transaction history, wherever the fixed tools we use allow it.
We don't sell or rent your data. We share it with the following processors, only to the extent needed to run the service:
| Who | What they process | Why |
|---|---|---|
| TrueLayer | Bank account/transaction data | FCA-authorised Open Banking provider — the bank connection itself |
| Trading 212 | Your API key, portfolio data | Fetching your investment data using the key you provide |
| OpenAI | Chat messages, relevant financial data | Generating Fina's answers to your questions |
| Anthropic | Transaction data (batched) | Background categorisation and the periodic analysis report |
| ReadmeDB | Long-term memory notes (income, goals, preferences) | Remembering context across sessions |
| Clerk | Name, email, authentication | Sign-in and account security |
| Neon (PostgreSQL hosting) | All of the above, at rest | Our database infrastructure |
We may also disclose data if required by law, or to protect the rights, safety, or property of Fina or our users.
We keep your data for as long as your account is active. If you disconnect a bank, we stop syncing new data from it but retain the transactions already fetched (so your history stays intact) unless you delete your account. If you delete your account, we delete your personal data, subject to any legal retention requirements.
If you're in the UK or EU, UK GDPR / GDPR gives you the right to:
To exercise any of these, email [email protected]. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Bank access tokens and Trading 212 API keys are encrypted (AES-256-GCM) in our database. All traffic to and from Fina is encrypted in transit (TLS). Full detail on our security model is on the Security & Data page.
We use only the cookies necessary to keep you signed in (set by Clerk, our authentication provider). We do not use advertising cookies, and we don't run third-party analytics or ad-tracking scripts on this site.
Fina is a financial service intended for adults. It is not directed at, and we do not knowingly collect data from, anyone under 18.
Some of our processors — including Anthropic and OpenAI — are based in the US and may process data outside the UK/EEA as part of generating Fina's answers. We haven't independently verified the specific transfer mechanism each processor relies on; you can review their own privacy policies for that detail (Anthropic's and OpenAI's privacy policies are published on their respective websites). If you have questions about a specific processor's safeguards, email [email protected] and we'll look into it.
We'll update this page if what we collect or how we use it changes, and update the "Last updated" date above. For material changes, we'll make a reasonable effort to notify you directly.
Questions, requests, or concerns about your data: [email protected].